undefined | Better HN

0 pointsgroestl3y ago0 comments

For me it's now Debian on the server (debs) and Arch on the desktop (rolling releases, AURs).

0 comments

3 comments · 1 top-level

wankle3y ago· 2 in thread

Who controls quality and security in the AUR world? It doesn't seem like something I'd want to trust?

the AUR is user supported, no claims are made, but AURs are built off of short scripts called PKGBUILDs so it's easy to audit, you're gonna want to look for the line that links to a tar archive or git repository.

groestlOP3y ago

Nobody, but the specs are so simple you can audit them yourself usually. For me it's mostly about low friction packaging my own software tbh.

j / k navigate · click thread line to collapse